Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8c842234-5cac-3023-af77-9c58ff2c7c7c.roa
File:                     8c842234-5cac-3023-af77-9c58ff2c7c7c.roa (raw, json)
Hash identifier:          Ck9T5e9/DL87p+UnsbWGrP7rqsOSIkclecQ9RwiacJk=
Subject key identifier:   F0:B1:1A:CC:FF:4C:AD:0E:07:34:FC:19:D7:E6:D7:B2:3B:3F:63:61
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584AC71120A928446F2C67DC76C0
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8c842234-5cac-3023-af77-9c58ff2c7c7c.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     49
IP address blocks:        129.6.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:20:a9:28:44:6f:2c:67:dc:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=c9466b7e-ea2f-49f2-b4f6-4c8791d3b5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b1:a0:4d:09:6c:07:82:d2:7a:79:dd:ed:b7:
                    5e:90:6b:e1:17:4e:29:70:f3:e7:23:04:18:b4:3d:
                    cb:7f:90:1f:a8:6d:65:39:ad:f1:b4:2c:65:31:30:
                    27:67:36:75:29:03:65:80:8d:76:ea:9e:5b:a9:40:
                    26:a9:98:60:2c:dd:4f:48:6e:be:84:ae:9b:76:d4:
                    39:1a:ff:7e:68:04:95:45:f0:62:99:24:92:bb:2d:
                    ae:51:11:62:55:d1:78:de:dc:0e:c0:57:08:29:d2:
                    8b:f2:4b:d1:c0:03:b3:8e:46:93:0c:c2:af:e7:6c:
                    4f:c0:9b:78:9a:ae:cb:17:35:6a:3a:a4:8a:af:b7:
                    f6:13:30:20:c5:30:e7:e8:88:81:8b:04:3c:64:75:
                    48:cb:0b:05:6e:8e:27:31:bd:90:a2:20:ad:c8:dc:
                    1b:b2:c8:49:2d:a3:32:f4:d3:c4:7c:04:41:a2:fa:
                    12:51:c9:c7:a1:07:97:6f:6b:ac:c5:ae:b5:72:9f:
                    e3:f3:51:f9:97:45:17:30:d3:7f:0d:2e:66:03:c3:
                    f2:d6:80:0a:ba:fe:b8:c3:42:57:fa:35:db:f2:a9:
                    66:89:94:94:6c:b0:a9:9c:3e:09:8b:8a:b0:44:be:
                    15:92:43:23:6c:f4:82:97:b6:97:f1:16:c6:0d:8f:
                    a3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B1:1A:CC:FF:4C:AD:0E:07:34:FC:19:D7:E6:D7:B2:3B:3F:63:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8c842234-5cac-3023-af77-9c58ff2c7c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f8:5e:00:20:1a:46:9b:11:65:06:8d:86:75:a1:43:14:56:
         ec:dc:cb:bf:b9:f0:4b:58:cc:ce:9d:a1:8d:4a:e4:54:e0:50:
         23:9b:da:91:c7:df:a3:c3:2c:af:a3:0c:17:56:e3:87:09:e6:
         6a:af:61:5e:27:d8:34:13:6c:26:54:e8:e0:c4:b8:f7:8a:ae:
         75:a6:4f:11:64:88:f6:7a:ec:02:ff:6c:6a:04:14:d0:a2:68:
         56:29:da:a8:ca:89:b0:b8:35:e4:e7:7e:5b:7c:db:ac:bf:60:
         69:47:3a:b8:34:2a:5b:80:10:28:31:fd:fb:1d:2b:de:d8:42:
         8d:7a:31:3e:5d:bd:60:36:35:71:ae:e8:cc:5e:af:6a:e0:bb:
         cc:ee:d0:13:0c:77:87:ac:35:f3:ed:fb:d1:08:b6:6c:6b:21:
         24:cf:a0:fa:b0:8e:f1:db:9f:bd:a2:93:73:e9:0b:c6:23:51:
         54:43:82:8c:ac:be:56:b0:2b:0e:44:22:48:41:1d:d8:61:3a:
         60:98:c6:a3:65:8a:7f:33:df:d0:3c:ff:41:33:1b:26:a3:c9:
         6f:a4:68:41:ba:32:3b:57:4f:e9:17:3e:e1:8a:05:33:6f:21:
         24:93:0e:49:c3:a6:90:23:c2:7a:13:a5:e5:50:00:55:8c:7e:
         c6:01:6d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:06:20 2025 by rpki-client